Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.cer
File:                     FUjxCV8eD5t4Sxt_3Y8OdZyELf4.cer (raw, json)
Hash identifier:          vP+3BWo6zrczGtAtulHoCnVbwAK3xRhivO3VxgomPKo=
Subject key identifier:   15:48:F1:09:5F:1E:0F:9B:78:4B:1B:7F:DD:8F:0E:75:9C:84:2D:FE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       021474
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91DBF0C/4A0FFA968C5B11EFA706757FC4F9AE02/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91DBF0C/4A0FFA968C5B11EFA706757FC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 17 Oct 2024 07:42:03 +0000
Certificate not after:    Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources:    AS: 153312
                          IP: 2401:c060::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136308 (0x21474)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct 17 07:42:03 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=A91DBF0C/serialNumber=1548F1095F1E0F9B784B1B7FDD8F0E759C842DFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:db:d5:25:29:09:1f:1f:7f:80:b4:86:5f:73:
                    04:11:8e:5a:75:3b:2a:78:40:97:53:52:0b:38:b4:
                    a6:c7:ab:4e:af:5a:5b:28:0d:78:00:1e:2e:03:96:
                    74:7e:eb:a4:e1:73:d1:b5:8d:f6:63:34:1e:38:a5:
                    ea:ee:c4:d3:12:a8:c3:46:5e:e5:74:fc:22:5c:9f:
                    ed:8b:b0:28:00:db:72:92:0e:82:df:d0:76:49:63:
                    06:f5:75:2c:99:3d:72:82:47:19:36:7e:8a:ee:12:
                    2b:c7:63:c7:30:3b:9e:a3:5e:26:60:aa:0f:b6:77:
                    3d:92:76:fc:57:46:7a:55:d6:e9:0e:05:2e:49:ba:
                    f0:ed:28:39:19:0a:69:98:8c:d2:0f:28:2a:e4:1b:
                    06:b5:b3:f0:90:02:21:b1:8a:c4:53:b3:9c:af:bc:
                    a6:7a:76:71:00:5e:c0:dc:22:88:5c:0a:b5:35:d7:
                    1e:3d:61:92:b6:79:8c:8a:b5:31:ba:eb:1b:e4:be:
                    62:ae:a0:57:20:19:51:9c:ce:0e:06:3a:d5:df:8c:
                    a0:73:dc:fa:76:07:a9:f7:57:12:f0:2b:a1:65:60:
                    98:52:b2:a2:78:e4:6c:a8:68:d3:af:16:70:da:e8:
                    a9:cd:4f:12:0c:87:ea:bb:47:94:33:a4:70:66:09:
                    23:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:48:F1:09:5F:1E:0F:9B:78:4B:1B:7F:DD:8F:0E:75:9C:84:2D:FE
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DBF0C/4A0FFA968C5B11EFA706757FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DBF0C/4A0FFA968C5B11EFA706757FC4F9AE02/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  153312

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:c060::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:7c:97:f4:f7:d9:e6:22:bd:98:0c:29:74:b4:f6:0c:3a:ed:
         0d:f8:1c:96:2a:42:08:25:c9:4b:34:55:db:37:10:97:61:b1:
         63:d5:02:e3:29:cc:c4:5e:4d:71:ea:6c:96:89:cf:67:8a:d2:
         ea:b4:f7:54:93:1b:99:0f:bc:fd:12:01:48:3d:3a:1d:f2:16:
         88:64:0c:82:91:da:26:a8:b9:01:48:cf:0a:9a:7f:b9:96:eb:
         39:0e:a2:2c:ce:21:03:ae:41:7c:31:28:a6:50:a6:ad:74:6a:
         2a:1b:fe:7e:9e:43:7d:d7:3b:6f:11:b9:ad:b1:b2:03:81:24:
         57:0e:18:11:a6:2b:a0:e6:c3:29:3e:44:1c:45:4f:d1:e6:e7:
         70:45:40:b4:e8:1f:c7:a7:be:d4:3a:b7:9a:c3:25:77:af:38:
         52:f8:3b:05:33:11:e2:6f:80:5a:37:9b:13:af:57:fe:ed:f5:
         42:b3:b0:9d:b8:f2:03:a2:ef:1e:9e:60:e8:c3:c0:db:31:c8:
         57:7d:39:31:43:56:c5:d8:fc:5c:dc:06:73:21:ec:54:df:84:
         f7:8f:29:4c:0c:97:4c:ce:19:85:9c:8a:9a:4c:82:eb:8b:1c:
         a9:78:e5:ab:75:f9:d3:17:ac:81:2b:f2:32:34:fc:b7:fb:f7:
         a8:b6:e1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----